THEONE Vault Privacy Policy

Last updated: 17 September 2026

The Vault is the private app for two people that comes with every THEONE ring. This page explains what the app stores, why, and what you can do about it.

Who is responsible

Theone d.o.o., Radovanova ulica 18, 2000 Maribor, Slovenia. Registration number 7356315000. Email: support@promisetheone.com.

What the Vault stores

Your account: your email address and your password. The password is stored only in a protected, unreadable form.
Your identity seal: your full name, your birthday and your phone number. We ask for these once, so that one person can only ever hold one promise.
Your ring order number, to confirm that a THEONE ring belongs to your vault.
Your vault: both your names, your dates, and everything the two of you put inside. That means your nightly answers, photos, letters, promises and game picks.
The time you sign in, to keep accounts safe.

What we do not do

The app has no advertising and no tracking. We do not sell your data and we do not share it with advertisers.

Who can see what you write

Your partner. Nobody else inside the app. Our small team only accesses vault data when it is needed to fix a problem you report, to keep the service secure, or when the law requires it.

Why we are allowed to use this data

To provide the app you asked for (contract). To keep the service secure and to keep the rule of one person, one promise (legitimate interest). Reminders are sent only if you allow notifications on your phone.

Companies that process data for us

Supabase: database, sign in and photo storage.
Netlify: hosting, the ring order check and the partner invitation.
Resend: the emails the app sends, such as the partner invitation and password reset.
Shopify: our shop, where the ring order number comes from.

Some of these companies use servers outside the European Union, including in the United States. Those transfers are covered by the EU standard contractual clauses or the EU and US Data Privacy Framework.

How long we keep it

For as long as your account exists. When you delete your account, your profile and your sign in are removed. If your partner is still in the vault, the vault stays with them. If nobody is left, the vault and everything written in it is deleted. Its photos can no longer be opened by anyone from that moment, and the photo files are removed from our storage within 30 days.

After deletion we keep one minimal record: a key made from your name and birthday, and the last digits of your phone number. It exists only so that the same person cannot open a second vault.

How to delete your account

In the app open Us, then Settings, then Delete my account. You can also write to support@promisetheone.com.

Age

The Vault is for people aged 16 and over.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to support@promisetheone.com. You can also complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, ip-rs.si).